---
title: "Enforce Password Policies"
slug: "enforcing-password-policies"
updated: 2026-08-06T11:13:37Z
published: 2026-08-06T11:13:37Z
canonical: "support.whatfix.com/enforcing-password-policies"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://support.whatfix.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Enforce Password Policies

Whatfix follows industry best practices to ensure customer account safety and compliance. The default password policy enforces a minimum of 8 characters. However, we also support those businesses who wish to implement a password policy that is more aligned to their organization's security standards. In this section, we have explained the different password policies you can configure:

**Note**

To activate your password policies for your Whatfix account, contact [support@whatfix.com](mailto:support@whatfix.com?Subject=Activate%20password%20policies&Body=Hello%20Team%2C%0A%0APlease%20activate%20password%20policy%20for%20my%20Whatfix%20account.%0A%0AMore%20information%20on%20our%20security%20standards%3A%0A%0A%0AThanks%20and%20regards.).

your title goes here

Policies are enforced through all login touch points (dashboard, website, and Studio).

| Policy | Description |
| --- | --- |
| Password Length | Minimum/Maximum : 1/100 characters |
| Password Composition | Alphanumeric indicators: - Upper Case - Lower Case - Number - Any Special Character |
| Password Expiry | - No notifications are sent to the user prior to the expiration of the password. - Once the password expires, a password expiry message along with information about a password reset link will be sent by email. - Minimum/Maximum - 90/365 days |
| Password Retention | Define how many recent historical passwords should not be reused. If the number is set to 4, then the new password cannot be one of the last 4 passwords that were used. |
| Login Failure | - Once you cross the login failure threshold, the account is **LOCKED**. - Once locked, you will receive an email with instructions to unlock your account. For more information, see [how to unlock my Whatfix account?](https://support.whatfix.com/docs/how-can-i-unlock-my-whatfix-account) |

## Related

- [Forgot my password](/resetting-my-password.md)
- [Change my password](/change-my-password.md)
- [How can I unlock my Whatfix account?](/how-can-i-unlock-my-whatfix-account.md)